Commit 5a55aec0 authored by Andrii Salnikov's avatar Andrii Salnikov

updating archery deployment guide

parent df84c06f
Pipeline #4674 passed with stages
in 2 minutes and 34 seconds
......@@ -139,12 +139,21 @@ Define ``NS`` records [#]_ to refer defined subzone::
.. [#] If you plan to use different out-of-scope domain names in ``NS`` don't forget to add glue ``A`` records.
Define ARCHERY entry point ``TXT`` resource record::
To create an ARCHERY entry point in the parent zone you can:
$ORIGIN example.org.
# ARCHERY entry point
_archery TXT “u=index.example.org t=org.nordugrid.archery”
- define ``CNAME`` record to use ``example.org`` as an entry point::
$ORIGIN example.org.
# ARCHERY entry point
_archery CNAME _archery.index
- OR define ``TXT`` resource record with ARCHERY data pointing to group::
$ORIGIN example.org.
# ARCHERY entry point
_archery TXT “u=index.example.org t=archery.group”
The same technics can be used to define any other entry points (e.g. in the complete different domain). ``CNAME`` is recommended if you point to the only one ARCHERY group.
Prepare static list of Computing Elements
=========================================
......@@ -159,14 +168,14 @@ CEs are specified line-by-line in the file::
To migrate from EGIIS ``archery-manage`` allows you to dump list of CEs automatically::
archery-manage -s egiis:ldap://old.egiis.example.org:2135/Mds-Vo-Name=ExampleVO,o=grid \
-o CEs > ces.list
-o arc-CEs > ces.list
Populate DNS with information
=============================
To populate DNS zone with endpoints information you should run ``archery-manage`` in the following way::
archery-manage -s file:ces.list --ddns-update \
archery-manage -s arcce-list:ces.list --ddns-update \
--domain index.example.org --ddns-master-ip 192.0.2.100 \
--ddns-tsig-keyfile archery-manage.key
......@@ -183,7 +192,7 @@ Filter: Port connectivity
Check network connectivity to endpoint TCP port and filter endpoints that do not pass this test::
archery-manage -s file:ce.list -f portscan ...
archery-manage -s arcce-list:ce.list -f portscan ...
Filter: Endpoint type
......@@ -194,11 +203,11 @@ a dedicated filter.
For example, if you want only EMI-ES ResourceInfo endpoints for EMI-ES only operation::
archery-manage -s file:ce.list -f type:org.ogf.glue.emies.resourceinfo ...
archery-manage -s arcce-list:ce.list -f type:org.ogf.glue.emies.resourceinfo ...
EMI-ES ResourceInfo and LDAP GLUE2 endpoints::
archery-manage -s file:ce.list -f type:org.ogf.glue.emies.resourceinfo,org.nordugrid.ldapglue2 ...
archery-manage -s arcce-list:ce.list -f type:org.ogf.glue.emies.resourceinfo,org.nordugrid.ldapglue2 ...
There is a special endpoint filter ``resourceinfo`` that is equivalent to EMI-ES ResourceInfo, LDAP GLUE2 and LDAP Nordugrid.
......@@ -208,7 +217,7 @@ Filter: VO
For project-based ARCHERY deployment it is also useful to filter endpoints based on VO access policy.
Only endpoints that advertise specified VO support will be added [#]_::
archery-manage -s file:ce.list -f vo:exampleVO ...
archery-manage -s arcce-list:ce.list -f vo:exampleVO ...
.. [#] Resource information (``GLUE2PolicyRule`` in GLUE2 and ``nordugrid-cluster-acl`` in Nordugrid LDAP) will be used as a source of supported VOs
......@@ -222,14 +231,13 @@ General DNS queries
Any DNS client tool can be used, for example::
[user ~]$ host -t TXT _archery.example.org
_archery.example.org descriptive text "u=index.example.org t=org.nordugrid.archery"
[root ~]$ host -t TXT _archery.index.example.org
_archery.index.example.org descriptive text "u=dns://ce01.example.org._archery.index.example.org t=org.nordugrid.archery"
_archery.index.example.org descriptive text "u=dns://ce02.example.org._archery.index.example.org t=org.nordugrid.archery"
_archery.example.org is an alias for _archery.index.example.org
_archery.index.example.org descriptive text "u=dns://ce01.example.org._archery.index.example.org. t=archery.service"
_archery.index.example.org descriptive text "u=dns://ce02.example.org._archery.index.example.org. t=archery.service"
<output omitted>
[root ~]$ host -t TXT ce01.example.org._archery.index.example.org
ce01.example.org._archery.index.example.org descriptive text "o=service t=org.nordugrid.arex id=ce01.example.org"
ce01.example.org._archery.index.example.org descriptive text "u=ldap://ce01.example.org:2135/o=glue t=org.nordugrid.ldapglue2"
ce01.example.org._archery.index.example.org descriptive text "u=https://ce01.example.org:60000/arex t=org.ogf.glue.emies.resourceinfo"
<output omitted>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment